--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T10:08:53Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-28T10:08:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T10:08:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-28T10:08:53Z" name: system:openshift:openshift-monitoring-pvn57 resourceVersion: "8349" uid: 5f020bd4-3a21-43a5-8acc-b545fd59c181 spec: extra: authentication.kubernetes.io/credential-id: - JTI=7cf41acd-4388-4eb8-aff2-404ccabe38da authentication.kubernetes.io/node-name: - ip-10-0-130-235.ec2.internal authentication.kubernetes.io/node-uid: - 7e4b7cc7-bc52-440c-837f-9c986e266cd5 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-x6bhh authentication.kubernetes.io/pod-uid: - 3014f727-2c79-465d-ba86-bbea763014e5 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 0bea79c4-688b-45ad-9ea8-c8fe498fa5ff usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRYmROWFBxTWIweHVYdzh0Uis0ekdLekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01qZ3hNREF6TlROYUZ3MHlPREEzTWpjeE1EQXpOVE5hTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJPVkoyVjdGQmZNbHVYKzM5aUdkbURZNQpkVHdGaHlOQkVPYXB1RG9QQ0lkT3FzbWJZREJ0bU5VZllhR295bWFONFhna1ZDR3p3QWVWR3JIZlU5TlpuNGlqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQXh4MjFTVTUyN3ZHYjVVM3g0NEVlaFdQZHVNU2VBMWNjL1kzSApRaWhjcW5tVkJmM3EzZnRTZS9tYUNFQXRkVlF5Q3hFWXJvRVNJamZLM0k1RG1tMGo2ekFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQVhnRjh1cUdHeWprWTZPRll5dHVYTnNRRlRaQkhFcURBZ25yaXZYelFNcm45Qzd2SHRYOXIKZlFLM3dkbC9SelFsYkpwT2I5SE1rbGFaYXJBSFRBS1ZidGRiVlVFTUhFcThjN2s2MlJldlhOM1U3UTJtUHZNVgpLakZ2dkRubmpuQmdWc2ZyL2xjUVl6dWc1dkpjYW5LV2cxcFQwRDdxRU1jMHV6R3NaM1VkdjVvVFQxSWNjVWNNCnF6RXIveGVXTFhqZkZHYlN6ejlaMFk5bEpJU3pNRmhXMktQK3NIUEVQUVZ6Q0tKdmRsaXdlMW1FNllRTUhLUHEKL0c4dXFJYW9uMWQrUFJnODgwanYxWVRualdJd2NPSVhOVkJXempqY2xkc2ZadGZISHBSaFgrWEdaOWp0d3JERAoxcGZHQUx3MU44Q1MvNThmSTZIc1c1S280Q01aVFVKeGlBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-28T10:08:53Z" lastUpdateTime: "2026-07-28T10:08:53Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-pvn57" reason: AutoApproved status: "True" type: Approved